{"report_id":"bd8c6059-c365-45e6-b226-0716c91e69f4","version":6,"status":"done","tags":[],"date":"2026-04-21T10:25:04Z","url":{"schema":"https","addr":"eqpay.icu/","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":0,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"eqpay.icu/p/ahp.htm","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"title":"Deposito per l'attivazione del trading","dom":{"size":5984,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ec54a3c2d7ce266d3bf64b13ba9296a1","sha1":"6f0de12a4e5c2410d15a843cc292116471391747","sha256":"6749a9fcf909cc7dc54deb28821650fed3838fb76e7c9fdd03b1b30af4844aec","sha512":"383e08a15c0112a61c41bc96ac6d1a9da41095e90c35035685ff6037dcb5adf0faf6d11bdae0ef8fa71f2d6a0e86ee25a0ffc80196286609df3c078b15bae199","ssdeep":"96:SSjobnNs2uS0nRpLt59re+zcrtmJ5JPJ+7KAOrNQixkIl0:Fjgs2ILt59re+4rIXx+xixkm0","tlshash":"93c1416120f6886310a390926b76be0eaf95fc47ca96de8473ad46c54fc2e81cd73158","dom_hash":"domhash2e9ad8c5cc827d0f87563a2caf193dd7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"eqpay.icu/","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":0,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T10:25:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T10:24:44Z","timestamp":1776767084,"ip_dst":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"ip_src":{"addr":"Client IP","port":36768,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-04-21T10:24:44.114829+0000\",\"flow_id\":1479153726323553,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":36768,\"dest_ip\":\"23.236.186.134\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"eqpay.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":911,\"bytes_toclient\":1654,\"start\":\"2026-04-21T10:24:44.064353+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"eqpay.icu","ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-04-18","domain_rank":0,"first_seen":"2026-04-21T10:25:04.538719Z","last_seen":"2026-04-21T10:25:04.538719Z","alert_count":0,"request_count":11,"received_data":167326,"sent_data":4923,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:2.2.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.2.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":4,"received_data":90652,"sent_data":2076,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":5450,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"eqpay.icu/p/ahp.htm","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba820af3218f81ea0282f400717e00d5","sha1":"1fd786cf9548005b6f3a9b7fa98b9887082b97d3","sha256":"2bde44e97ba2324f7515a9d2627bacc059bb73176cecc9cd7936b29c87ddb6e1","sha512":"bccc2d46fb4e0c29a05ff1b3b67c81a2e37411a9506eb79c1458b6d7921a934de15907d9360d361293e1c2165cacde1d3064bffe4b9f7b1d6cf26b039c7d03f6","ssdeep":"","tlshash":"c4f0e50c78fb62201937347f9fbfa5002a2a302bb80bd641b49d28c84f80a48a6e3d54","size":595,"data":"","first_seen":"2026-02-26T18:37:29.444658Z","last_seen":"2026-04-21T10:45:36.660998Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eqpay.icu/p/ahp.htm","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"c069c18e8b32470168b3e2a64d5736d2","sha1":"a82d55a91ba16933a863547960f9835c7d4da6b1","sha256":"fd95dd458c1cda09977c674d76e404c4e08ba52a59942001e81acd221bc37176","sha512":"bd51ec5db709d3d91b67f26f820375781134e2553bd2c1ec1e10148fe7014b75a78551ff7e2540e73cfb29f7b649251aeb5966b9e6d091772271d438b49ea012","ssdeep":"","tlshash":"6df0d1c9117701e462e7b07716072401623951b73751cc64770e45505f9513ac51ba99","size":470,"data":"","first_seen":"2026-04-21T10:25:08.161954Z","last_seen":"2026-04-21T10:45:36.661566Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eqpay.icu/default/js/script.js","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7b3c42c791843bd4d8a92c890083d8f","sha1":"55f77082a7763e7d4269ef5e8c02128580a65cb9","sha256":"61b1d8d7eb9534856751f85964a78e923a46a91670787dc83d0b9de9ec009f00","sha512":"44913d21d5ff53456b569a53c5f1e77a52538e6c78d1c58de46d137900a6d70b2ae91eae6f7a34011fdd0d7553f9a9119b5c9e41a05b629ac869fb3a1abfdffe","ssdeep":"","tlshash":"8931aa0876b644901bbb34df5bbb71101a30320bf54ace8575ac8bc44fc09989196bdd","size":1589,"data":"","first_seen":"2026-02-26T18:37:29.442273Z","last_seen":"2026-04-21T10:45:36.658831Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eqpay.icu/ajax/libs/jquery/2.2.0/jquery.min.js","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fc159d00dc3cea4153c038739683f93","sha1":"5d7e5bbfa540f0e53bd599e4305e1a4e815b5dd1","sha256":"8a102873a33f24f7eb22221e6b23c4f718e29f85168ecc769a35bfaed9b12cce","sha512":"a574742476d89bdf841a26fac51ff0fae62cfeed95f38a1f3eb0699202d8c8abe165826d514bca4b2d69822f2d25901a72c3f081fd646e1238cf082ef0e28ea8","ssdeep":"1536:kYE1JVoiB9JqZdXXe2pD3PgoIK6alrUnzZ6a4msO7R6xfWBP4TCddWHs3ghna98o:P4KZ+sOsOV6x6pwhna98HrU","tlshash":"1683d6d9b2d6705297b734b850bf410bb17a98dab44c8c60f098d4e47eb4a8e507bf2d","size":85589,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-04-27T12:55:35.462374Z","times_seen":8261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"eqpay.icu/image/AQADwRNrG_CYGEt9","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eqpay.icu/p/ahp.htm","date":"2026-04-21T10:24:44.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eqpay.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 19:08:50 GMT","end":"Fri, 17 Jul 2026 19:08:49 GMT"},"fingerprint":{"sha1":"51:CB:F6:30:08:E8:CA:C7:93:72:A4:0D:0F:19:D0:36:C8:8A:41:AC","sha256":"30:98:F8:EB:D7:62:C8:A4:96:80:65:D1:76:59:89:F6:2D:C7:B9:9F:80:44:2A:91:30:7E:F7:4C:FB:9F:C3:CA"}}},"request":{"raw":"GET /image/AQADwRNrG_CYGEt9 HTTP/1.1\r\nHost: eqpay.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eqpay.icu/p/ahp.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:24:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45733\r\nlast-modified: Sat, 18 Apr 2026 20:07:16 GMT\r\netag: \"b2a5-64fc19cac9e8a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45733,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 747x411, components 3","md5":"95c106b7ee348eb2b369a62eb951f436","sha1":"f5ec44cd13d1a4dfa54724bdb3d9438efe5b080a","sha256":"7a17a95cabbc26b4363f3c2d9fb00684f56f3b476700890ab8fe454eca665802","sha512":"04bcf2fa4646570c8c4de6e2a9e59c32b24d75fd6db114e9e178e905d7078238115899ab060d289b8cb9cfe7c1f83e5a9b50ea8968697d13c32b80879930658a","ssdeep":"768:Ys0W61ZlSXUUrO62AJMlQmUC0svUk36lplTVKoxifOInrpZ5C60G4dMV1nUK:YplLcOA0Q5k4plBKMpiFZ0WYMF","tlshash":"a723f1f6eec4638d9ea6fa6d6930d29f50339550c21d410eec089a2a10fbecd755b8c8","first_seen":"2026-04-21T10:25:08.145065Z","last_seen":"2026-04-21T10:45:36.656539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo/v25/4UaOrEtFpBISc36j.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eqpay.icu/p/ahp.htm","date":"2026-04-21T10:24:44.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/exo/v25/4UaOrEtFpBISc36j.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://eqpay.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 08:25:58 GMT\r\nexpires: Fri, 16 Apr 2027 08:25:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 439126\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21828, version 1.0","md5":"40836fee7a598ef229d06bf980e0e75f","sha1":"7b52a6ecd225795e276b548eab6f28628eb60b21","sha256":"18bbf39a4e6915f988af7263ab2d92858949dc317e2fcfd3e77908f7a36cbc2c","sha512":"6e511e48953a95876b6327013ba9b231f6d7fdee326b4ba88182f2e4e44d3acda336b3c447cffd6f76880d0bf9bb0be2b8cf75289e3f9eda83da612cfb5c0e37","ssdeep":"384:NA/aRBQ7DN907nJyk+VgjQrIrDibRQvDyvycNsL98A75InDbLXaI9G1Pu:pQV907Jd+VSQ7bRQ7yvDN4fk/7F8Pu","tlshash":"d9a2f110cc5119b88f4afa74c12d7a963ed10358195cbf0cf96cb5eadd71748536462a","first_seen":"2025-06-02T18:19:41.054001Z","last_seen":"2026-04-27T13:30:26.96499Z","times_seen":1878,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":95,"dns":0,"connect":7,"send":0,"wait":8,"receive":2,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo/v25/4UaOrEtFpBISc36j.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eqpay.icu/p/ahp.htm","date":"2026-04-21T10:24:44.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/exo/v25/4UaOrEtFpBISc36j.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://eqpay.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 08:25:58 GMT\r\nexpires: Fri, 16 Apr 2027 08:25:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 439126\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21828, version 1.0","md5":"40836fee7a598ef229d06bf980e0e75f","sha1":"7b52a6ecd225795e276b548eab6f28628eb60b21","sha256":"18bbf39a4e6915f988af7263ab2d92858949dc317e2fcfd3e77908f7a36cbc2c","sha512":"6e511e48953a95876b6327013ba9b231f6d7fdee326b4ba88182f2e4e44d3acda336b3c447cffd6f76880d0bf9bb0be2b8cf75289e3f9eda83da612cfb5c0e37","ssdeep":"384:NA/aRBQ7DN907nJyk+VgjQrIrDibRQvDyvycNsL98A75InDbLXaI9G1Pu:pQV907Jd+VSQ7bRQ7yvDN4fk/7F8Pu","tlshash":"d9a2f110cc5119b88f4afa74c12d7a963ed10358195cbf0cf96cb5eadd71748536462a","first_seen":"2025-06-02T18:19:41.054001Z","last_seen":"2026-04-27T13:30:26.96499Z","times_seen":1878,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":59,"dns":1,"connect":20,"send":0,"wait":8,"receive":3,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eqpay.icu/p/ahp.htm","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T10:24:44.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eqpay.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 19:08:50 GMT","end":"Fri, 17 Jul 2026 19:08:49 GMT"},"fingerprint":{"sha1":"51:CB:F6:30:08:E8:CA:C7:93:72:A4:0D:0F:19:D0:36:C8:8A:41:AC","sha256":"30:98:F8:EB:D7:62:C8:A4:96:80:65:D1:76:59:89:F6:2D:C7:B9:9F:80:44:2A:91:30:7E:F7:4C:FB:9F:C3:CA"}}},"request":{"raw":"GET /p/ahp.htm HTTP/1.1\r\nHost: eqpay.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:24:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6051\r\nlast-modified: Mon, 20 Apr 2026 13:44:58 GMT\r\netag: \"17a3-64fe481322ace\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:2.2.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6051,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c0420cba83e6d062dfddc1a77f68163b","sha1":"204c7a020c7b322ce7388a856a7bf82229881f89","sha256":"0fcc44b6814c5a3b88b68ab3dbd9cfd6cf47b1c2b4be9a954385962828330138","sha512":"6f562de908da0e8c5cec966103835f02e8ec18656538ea7236a7c3ddaced3e69c652a08b7b6d7dc08ab11a81d85567d798b56d77ea6a430b751ccc9508f91137","ssdeep":"96:6USHbfCk9Ns4uGO0nRXLt59re+zcrtmJ5JPJf7KAOrNQixkIl0:IH7s4bLt59re+4rIXxfxixkm0","tlshash":"30c1636120f148a310a3a1d26b76be0e6f95f807c695de4473ad06d94fd3ec1cd73189","first_seen":"2026-04-21T10:25:08.146985Z","last_seen":"2026-04-21T10:45:36.66045Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo/v25/4UaOrEtFpBISc36j.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eqpay.icu/p/ahp.htm","date":"2026-04-21T10:24:44.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/exo/v25/4UaOrEtFpBISc36j.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://eqpay.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 08:25:58 GMT\r\nexpires: Fri, 16 Apr 2027 08:25:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 439126\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21828, version 1.0","md5":"40836fee7a598ef229d06bf980e0e75f","sha1":"7b52a6ecd225795e276b548eab6f28628eb60b21","sha256":"18bbf39a4e6915f988af7263ab2d92858949dc317e2fcfd3e77908f7a36cbc2c","sha512":"6e511e48953a95876b6327013ba9b231f6d7fdee326b4ba88182f2e4e44d3acda336b3c447cffd6f76880d0bf9bb0be2b8cf75289e3f9eda83da612cfb5c0e37","ssdeep":"384:NA/aRBQ7DN907nJyk+VgjQrIrDibRQvDyvycNsL98A75InDbLXaI9G1Pu:pQV907Jd+VSQ7bRQ7yvDN4fk/7F8Pu","tlshash":"d9a2f110cc5119b88f4afa74c12d7a963ed10358195cbf0cf96cb5eadd71748536462a","first_seen":"2025-06-02T18:19:41.054001Z","last_seen":"2026-04-27T13:30:26.96499Z","times_seen":1878,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":58,"dns":1,"connect":20,"send":0,"wait":8,"receive":3,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eqpay.icu/default/css/style.css","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eqpay.icu/p/ahp.htm","date":"2026-04-21T10:24:44.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eqpay.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 19:08:50 GMT","end":"Fri, 17 Jul 2026 19:08:49 GMT"},"fingerprint":{"sha1":"51:CB:F6:30:08:E8:CA:C7:93:72:A4:0D:0F:19:D0:36:C8:8A:41:AC","sha256":"30:98:F8:EB:D7:62:C8:A4:96:80:65:D1:76:59:89:F6:2D:C7:B9:9F:80:44:2A:91:30:7E:F7:4C:FB:9F:C3:CA"}}},"request":{"raw":"GET /default/css/style.css HTTP/1.1\r\nHost: eqpay.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eqpay.icu/p/ahp.htm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:24:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 9823\r\nlast-modified: Sat, 18 Apr 2026 20:07:16 GMT\r\netag: \"69e3e474-265f\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9823,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7495b8cfb7a108e5eb5d6d531a6bffc9","sha1":"d33ff31e1b8ae6351b6a3714431493523baa7445","sha256":"2d700c3893141863b22e66a1579a3cb5da084bdb7ccf658c9b8de88c4aa5bd28","sha512":"b05b7ab1e18fd6c395b1377dc29052bce71f2c7d33a2796ed971a39e28172394e2a619b4ad79ebafbd44489df616237b6bbc5d76170778a5359e7745b02d3d19","ssdeep":"192:8NwOytN0a2dFz4F0FCtUlgFmKtxv7Bu5srJeOA:860awFkFrFbVu23A","tlshash":"cd1244d109b31905a5af6c563ffa9baa236c4493d08eddac3ad5320c8fc92d451b1bcd","first_seen":"2026-02-26T18:37:29.439222Z","last_seen":"2026-04-21T10:45:36.657656Z","times_seen":4,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eqpay.icu/default/images/copy-card.svg","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eqpay.icu/p/ahp.htm","date":"2026-04-21T10:24:44.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eqpay.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 19:08:50 GMT","end":"Fri, 17 Jul 2026 19:08:49 GMT"},"fingerprint":{"sha1":"51:CB:F6:30:08:E8:CA:C7:93:72:A4:0D:0F:19:D0:36:C8:8A:41:AC","sha256":"30:98:F8:EB:D7:62:C8:A4:96:80:65:D1:76:59:89:F6:2D:C7:B9:9F:80:44:2A:91:30:7E:F7:4C:FB:9F:C3:CA"}}},"request":{"raw":"GET /default/images/copy-card.svg HTTP/1.1\r\nHost: eqpay.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eqpay.icu/p/ahp.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:24:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1052\r\nlast-modified: Sat, 18 Apr 2026 20:07:16 GMT\r\netag: \"69e3e474-41c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1052,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e3ad32cd6c563d2ebecbbc535064fdb2","sha1":"7b83d284062da480e18a6aaa6e31f3fc03896255","sha256":"ec2f417e23cddf61b0aeeba0b4cfc04a0a6aeb2d2a9a0a58a3b5d220d84e8b4a","sha512":"5f6ede062bc5bde9b3a498192979863396433f0aa829394a10694b15882775595f9f4963b56d05526d2b0fad9ba8f975e506b3e726c65f69e875b10526c70f53","ssdeep":"","tlshash":"4a1102e3c6c4e8d08c4bdb35dc3a26d7312b16fe3e0b598895d07b6a7841215895fe90","first_seen":"2026-02-26T18:37:29.433688Z","last_seen":"2026-04-21T10:45:36.657115Z","times_seen":4,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eqpay.icu/default/js/script.js","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eqpay.icu/p/ahp.htm","date":"2026-04-21T10:24:44.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eqpay.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 19:08:50 GMT","end":"Fri, 17 Jul 2026 19:08:49 GMT"},"fingerprint":{"sha1":"51:CB:F6:30:08:E8:CA:C7:93:72:A4:0D:0F:19:D0:36:C8:8A:41:AC","sha256":"30:98:F8:EB:D7:62:C8:A4:96:80:65:D1:76:59:89:F6:2D:C7:B9:9F:80:44:2A:91:30:7E:F7:4C:FB:9F:C3:CA"}}},"request":{"raw":"GET /default/js/script.js HTTP/1.1\r\nHost: eqpay.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eqpay.icu/p/ahp.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:24:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 1589\r\nlast-modified: Sat, 18 Apr 2026 20:07:16 GMT\r\netag: \"69e3e474-635\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1589,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"c7b3c42c791843bd4d8a92c890083d8f","sha1":"55f77082a7763e7d4269ef5e8c02128580a65cb9","sha256":"61b1d8d7eb9534856751f85964a78e923a46a91670787dc83d0b9de9ec009f00","sha512":"44913d21d5ff53456b569a53c5f1e77a52538e6c78d1c58de46d137900a6d70b2ae91eae6f7a34011fdd0d7553f9a9119b5c9e41a05b629ac869fb3a1abfdffe","ssdeep":"","tlshash":"8931aa0876b644901bbb34df5bbb71101a30320bf54ace8575ac8bc44fc09989196bdd","first_seen":"2026-02-26T18:37:29.442273Z","last_seen":"2026-04-21T10:45:36.658831Z","times_seen":4,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Exo:400,500,600,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eqpay.icu/p/ahp.htm","date":"2026-04-21T10:24:44.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css?family=Exo:400,500,600,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eqpay.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 21 Apr 2026 10:24:44 GMT\r\ndate: Tue, 21 Apr 2026 10:24:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4764,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"045d8a2b7519c2da01998363bdaed241","sha1":"b6b08d0ff1beeef7600e01d66a2eb36ec0f517ee","sha256":"28b1dd4b9ecadc0cb7266be92d102a1c1e7ea3af21a3334097a5be2fcc6c97c0","sha512":"97379bca936b8f20ae238b689901dd58ce511f3add7880206786cf3fadacc8121b32408b75ed9ba2403e808f2914f477d2902ce2e9d6a239cb107bf4147332a4","ssdeep":"96:cbOEakOEaDJc+uHOEaTgNDbOXakOXaDJc+uHOXaTgNDbOxMakOxMaDJc+uHOxMau:c8LXrkDkXEkGtXNkluXO/","tlshash":"95a1aea1042aa500fb871cc623ce7e32ae8e71556494c93d6ffe5c88ec9ec61235a75d","first_seen":"2025-10-13T01:11:01.292512Z","last_seen":"2026-04-21T10:45:36.653565Z","times_seen":12,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":59,"dns":1,"connect":7,"send":0,"wait":21,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eqpay.icu/media/16x16.png","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eqpay.icu/p/ahp.htm","date":"2026-04-21T10:24:44.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eqpay.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 19:08:50 GMT","end":"Fri, 17 Jul 2026 19:08:49 GMT"},"fingerprint":{"sha1":"51:CB:F6:30:08:E8:CA:C7:93:72:A4:0D:0F:19:D0:36:C8:8A:41:AC","sha256":"30:98:F8:EB:D7:62:C8:A4:96:80:65:D1:76:59:89:F6:2D:C7:B9:9F:80:44:2A:91:30:7E:F7:4C:FB:9F:C3:CA"}}},"request":{"raw":"GET /media/16x16.png HTTP/1.1\r\nHost: eqpay.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eqpay.icu/p/ahp.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:24:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 425\r\nlast-modified: Mon, 20 Apr 2026 13:44:07 GMT\r\netag: \"69e62da7-1a9\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"d03d0a3fd7103a35384f988b74ba502e","sha1":"4d17e97804da1a17573aceebe7d336b563589300","sha256":"25df9af0c82397690e954ce5ac834c164653731f7594f3355c0dcf7fc6ede806","sha512":"27a1ba421641e3ca852e7aa97a0a1a7338755b70ac4d56fbde03ab6e43003967c0199f5a191fc79255d6ad3ad76dd597764fbdac8383a889da13e59409d6cd11","ssdeep":"","tlshash":"19e0a3901be4fc1a8634567b2844f551d74a101885d625249d3d393458d254435b583a","first_seen":"2026-04-21T10:25:08.153839Z","last_seen":"2026-04-21T10:45:36.659913Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eqpay.icu/","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T10:24:42.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eqpay.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 19:08:50 GMT","end":"Fri, 17 Jul 2026 19:08:49 GMT"},"fingerprint":{"sha1":"51:CB:F6:30:08:E8:CA:C7:93:72:A4:0D:0F:19:D0:36:C8:8A:41:AC","sha256":"30:98:F8:EB:D7:62:C8:A4:96:80:65:D1:76:59:89:F6:2D:C7:B9:9F:80:44:2A:91:30:7E:F7:4C:FB:9F:C3:CA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eqpay.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:24:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.2.24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"829b60fe9f7d7a8ac9d19ed38cfed8af","sha1":"66efb8cb7235853aff56ced50df4fba4a831bbc0","sha256":"de8e9dc038fb15a2cc223d7f3c79c855523c9a0c50402120894d15665400ed1c","sha512":"1c70c415b078b23d6bc6cc7f937bb215dc82b1b349e7fe02cbf9b32c4e7421fee4a76f1c045bc2ff0e0d339c82a04dfe8071e5bc4dec180fe9dd0b31e1b7af09","ssdeep":"","tlshash":"69a022a3088200032332a2e03c0cb03be0022820eec80c30c02300ec08f2f2cee8b232","first_seen":"2026-04-21T10:25:08.155401Z","last_seen":"2026-04-21T10:45:36.654702Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3009,"timings":{"blocked":1479,"dns":1431,"connect":24,"send":0,"wait":45,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eqpay.icu/default/images/secure.svg","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eqpay.icu/p/ahp.htm","date":"2026-04-21T10:24:44.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eqpay.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 19:08:50 GMT","end":"Fri, 17 Jul 2026 19:08:49 GMT"},"fingerprint":{"sha1":"51:CB:F6:30:08:E8:CA:C7:93:72:A4:0D:0F:19:D0:36:C8:8A:41:AC","sha256":"30:98:F8:EB:D7:62:C8:A4:96:80:65:D1:76:59:89:F6:2D:C7:B9:9F:80:44:2A:91:30:7E:F7:4C:FB:9F:C3:CA"}}},"request":{"raw":"GET /default/images/secure.svg HTTP/1.1\r\nHost: eqpay.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eqpay.icu/p/ahp.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:24:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2069\r\nlast-modified: Sat, 18 Apr 2026 20:07:16 GMT\r\netag: \"69e3e474-815\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2069,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd6475c64a0de149d067327fb37c6cc5","sha1":"a4e753aa0e449732399bd2c35ff35d2ed9ece25c","sha256":"16b47a552ff6d6b205d46168d0d4c9156cc5f09a9a6155b268959d87e23e80ee","sha512":"1eeed1f2d6f9d396505c0719a81ecd17b2216400caf3068beb89678321db8951a42fd48adce7e8f19d8889ddd3710be5f80b0439b10ab5c059c5c7369af3daa2","ssdeep":"","tlshash":"8741d2f8e29434d228078fa4e53ba8a4f8673afe5b55efc5c1e1d930c4560dd9589c50","first_seen":"2026-02-26T18:37:29.432372Z","last_seen":"2026-04-21T10:45:36.655943Z","times_seen":4,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eqpay.icu/ajax/libs/jquery/2.2.0/jquery.min.js","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eqpay.icu/p/ahp.htm","date":"2026-04-21T10:24:44.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eqpay.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 19:08:50 GMT","end":"Fri, 17 Jul 2026 19:08:49 GMT"},"fingerprint":{"sha1":"51:CB:F6:30:08:E8:CA:C7:93:72:A4:0D:0F:19:D0:36:C8:8A:41:AC","sha256":"30:98:F8:EB:D7:62:C8:A4:96:80:65:D1:76:59:89:F6:2D:C7:B9:9F:80:44:2A:91:30:7E:F7:4C:FB:9F:C3:CA"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.0/jquery.min.js HTTP/1.1\r\nHost: eqpay.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eqpay.icu/p/ahp.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:24:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 85589\r\nlast-modified: Sat, 18 Apr 2026 20:07:16 GMT\r\netag: \"69e3e474-14e55\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85589,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32069)","md5":"6fc159d00dc3cea4153c038739683f93","sha1":"5d7e5bbfa540f0e53bd599e4305e1a4e815b5dd1","sha256":"8a102873a33f24f7eb22221e6b23c4f718e29f85168ecc769a35bfaed9b12cce","sha512":"a574742476d89bdf841a26fac51ff0fae62cfeed95f38a1f3eb0699202d8c8abe165826d514bca4b2d69822f2d25901a72c3f081fd646e1238cf082ef0e28ea8","ssdeep":"1536:kYE1JVoiB9JqZdXXe2pD3PgoIK6alrUnzZ6a4msO7R6xfWBP4TCddWHs3ghna98o:P4KZ+sOsOV6x6pwhna98HrU","tlshash":"1683d6d9b2d6705297b734b850bf410bb17a98dab44c8c60f098d4e47eb4a8e507bf2d","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-04-27T12:55:35.462374Z","times_seen":8261,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo/v25/4UaOrEtFpBISc36j.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eqpay.icu/p/ahp.htm","date":"2026-04-21T10:24:44.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/exo/v25/4UaOrEtFpBISc36j.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://eqpay.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 08:25:58 GMT\r\nexpires: Fri, 16 Apr 2027 08:25:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 439126\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21828, version 1.0","md5":"40836fee7a598ef229d06bf980e0e75f","sha1":"7b52a6ecd225795e276b548eab6f28628eb60b21","sha256":"18bbf39a4e6915f988af7263ab2d92858949dc317e2fcfd3e77908f7a36cbc2c","sha512":"6e511e48953a95876b6327013ba9b231f6d7fdee326b4ba88182f2e4e44d3acda336b3c447cffd6f76880d0bf9bb0be2b8cf75289e3f9eda83da612cfb5c0e37","ssdeep":"384:NA/aRBQ7DN907nJyk+VgjQrIrDibRQvDyvycNsL98A75InDbLXaI9G1Pu:pQV907Jd+VSQ7bRQ7yvDN4fk/7F8Pu","tlshash":"d9a2f110cc5119b88f4afa74c12d7a963ed10358195cbf0cf96cb5eadd71748536462a","first_seen":"2025-06-02T18:19:41.054001Z","last_seen":"2026-04-27T13:30:26.96499Z","times_seen":1878,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":53,"dns":1,"connect":7,"send":0,"wait":9,"receive":2,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eqpay.icu/media/192x192.png","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eqpay.icu/p/ahp.htm","date":"2026-04-21T10:24:44.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eqpay.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 19:08:50 GMT","end":"Fri, 17 Jul 2026 19:08:49 GMT"},"fingerprint":{"sha1":"51:CB:F6:30:08:E8:CA:C7:93:72:A4:0D:0F:19:D0:36:C8:8A:41:AC","sha256":"30:98:F8:EB:D7:62:C8:A4:96:80:65:D1:76:59:89:F6:2D:C7:B9:9F:80:44:2A:91:30:7E:F7:4C:FB:9F:C3:CA"}}},"request":{"raw":"GET /media/192x192.png HTTP/1.1\r\nHost: eqpay.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eqpay.icu/p/ahp.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:24:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 4224\r\nlast-modified: Mon, 20 Apr 2026 13:44:07 GMT\r\netag: \"69e62da7-1080\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4224,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"0444f5cdb67101907a5a0b9a72a655fd","sha1":"629d1b117eb1f116263576d53a3f65f20c6af11d","sha256":"e23ece891ebaa2405e42695ca3b7bd0331cc70fc937f2283c4b7bf17bfe41872","sha512":"65a17853b9b028d0f88f111890908e88b3a27fde21646d9c805fae20df0d3837faf55fc49fbc6cdfe7d93f77a1d26d7362bcfe568b5e8380549bc26e3d2c4858","ssdeep":"96:tLF7Fnh4bO5iFzVPnIPQguzZHyGs6icys7bBvlTT:tvhP5MvyGBivs7NlX","tlshash":"a0917d6e3608c07b42905e1292f7238a731d336190ce65391db5b2918e37eb02a4b265","first_seen":"2026-04-21T10:25:08.158306Z","last_seen":"2026-04-21T10:45:36.659356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eqpay.icu/default/css/toastr.css","fqdn":"eqpay.icu","domain":"eqpay.icu","tld":"icu"},"ip":{"addr":"23.236.186.134","port":443,"asn":55286,"as":"SERVER-MANIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eqpay.icu/p/ahp.htm","date":"2026-04-21T10:24:44.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eqpay.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 19:08:50 GMT","end":"Fri, 17 Jul 2026 19:08:49 GMT"},"fingerprint":{"sha1":"51:CB:F6:30:08:E8:CA:C7:93:72:A4:0D:0F:19:D0:36:C8:8A:41:AC","sha256":"30:98:F8:EB:D7:62:C8:A4:96:80:65:D1:76:59:89:F6:2D:C7:B9:9F:80:44:2A:91:30:7E:F7:4C:FB:9F:C3:CA"}}},"request":{"raw":"GET /default/css/toastr.css HTTP/1.1\r\nHost: eqpay.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eqpay.icu/p/ahp.htm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:24:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 8188\r\nlast-modified: Sat, 18 Apr 2026 20:07:16 GMT\r\netag: \"69e3e474-1ffc\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8188,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (823)","md5":"c575210a7d9ac96059de9fb3ff45893e","sha1":"f75e3284944c7eec93926fe7ac91bf770cb15d65","sha256":"68e97ad477da238098c207ede66cffb879a31085dad0d686037586e46b07fe7f","sha512":"24d1b30f29e6ccb0b2b0c88247affe13ca6309f6846d7fd8a14d57e1baf7939bbc072fce3018261bb7ce4a08587aca83f0b44b6c4330f24c56274c26194aff4e","ssdeep":"96:ME6u3BQe7MWzX5VhbgkH3B7IvMCTWQ78GhJZCjt/TWP+zLmlD9TWKG8CzyvTWVMG:L5GWzXJgkH3ddY8syYttUGiVMG","tlshash":"c3f17426c79539095d46807aefdf6213aa36205393ce68683d8f722dafc7ad4cc71e40","first_seen":"2026-02-26T18:37:29.437882Z","last_seen":"2026-04-21T10:45:36.655196Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}